Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa
File:                     13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa (raw, json)
Hash identifier:          cB3wilhn2VmLim1b+Dl3BPMRddR4RC6uMIda686oiCo=
Subject key identifier:   16:03:0F:E3:1C:C2:E6:21:A8:E7:1A:FC:FA:02:01:5F:D3:4E:32:FA
Certificate issuer:       /CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a
Certificate serial:       010D0C9F4328584CA5F70BCEF1E0D0F32D597300
Authority key identifier: D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     13509
IP address blocks:        159.123.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:0b:ce:f1:e0:d0:f3:2d:59:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=80f91bac-8f61-4640-aab7-b4527fb42646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:fb:5a:55:74:0f:d4:88:dc:bd:bd:99:b7:
                    0c:a2:e7:e8:ba:87:78:c0:7c:20:fa:68:57:14:7d:
                    c4:3d:81:41:c8:eb:74:47:bf:50:f0:9a:f0:42:e1:
                    60:7c:38:bd:de:68:56:05:51:4d:ad:9b:09:ba:1d:
                    62:d1:5e:66:0d:2a:14:2b:07:1d:ad:e9:27:35:02:
                    99:92:18:91:b2:d7:09:5b:9d:10:6b:a3:d7:1f:7e:
                    3a:73:9b:b0:1c:96:85:f7:4a:5c:69:48:c9:d3:7e:
                    8d:22:7d:f9:d9:3c:72:99:fc:fb:6d:6f:3e:8d:38:
                    bd:b8:82:10:15:89:2d:0b:c6:da:4f:60:cf:33:c1:
                    18:91:62:1b:83:83:76:e6:08:45:46:43:84:0a:1a:
                    07:d0:3e:59:86:58:cb:a0:b8:77:2e:35:59:79:5e:
                    0b:0b:e2:04:19:a4:00:a2:77:97:c8:fc:76:7a:66:
                    81:55:9c:7d:cf:c3:89:a0:c4:7a:e6:5e:db:fa:fb:
                    90:dd:17:62:a3:2d:11:49:54:d1:fa:af:da:04:bb:
                    09:de:61:65:0d:41:ab:c4:8e:60:4a:ac:0b:6f:88:
                    ad:8e:e9:71:bf:74:88:08:74:0d:fe:fe:3a:b4:34:
                    27:5a:40:ad:cc:e0:ba:53:3e:b3:84:94:2a:01:a7:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:0F:E3:1C:C2:E6:21:A8:E7:1A:FC:FA:02:01:5F:D3:4E:32:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl

            X509v3 Authority Key Identifier:
                keyid:D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.123.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:01:17:d4:d3:c8:b0:10:c6:0b:12:94:99:76:d2:46:97:
         a1:56:e2:ed:17:71:e2:2e:ca:de:5b:fa:f7:f9:8a:f5:13:b5:
         ff:59:0b:e7:d8:80:27:6e:4d:2c:a4:25:1e:14:86:74:ba:5d:
         b3:9e:b9:a2:78:86:f4:b3:8c:57:57:c0:0d:4d:29:ab:51:ea:
         fd:8e:9b:02:91:be:5f:49:b8:c9:2e:d1:6d:de:8d:93:75:f8:
         e6:1a:38:5e:0c:d3:6d:11:26:b3:79:6d:ff:e6:0e:b3:37:0b:
         6a:8a:94:f6:38:a6:6f:7b:c7:f6:2e:e5:64:bd:1a:ec:4d:58:
         bd:75:3b:49:5c:37:c7:24:dd:bf:99:62:8f:f7:7a:e9:d8:a4:
         50:9d:99:e8:a4:6c:15:17:e4:05:7e:a4:13:76:36:ec:99:5e:
         12:5b:e2:36:1a:f7:57:f7:e7:d8:e4:b7:04:66:b3:ed:25:74:
         65:d9:f6:6e:4a:c1:2b:1e:37:c3:69:64:20:84:6e:5d:79:e7:
         87:b3:0b:e0:99:1a:91:cc:4e:42:da:2d:b8:b5:fb:7c:85:b8:
         c3:e2:9a:42:41:fc:93:bb:73:5c:c1:b8:69:f1:80:c5:6d:0c:
         f3:7f:99:24:3c:60:3c:b1:af:3f:19:2f:39:75:ea:41:df:b7:
         3e:67:48:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:17 2026 by rpki-client